
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
File: vIYHvM59W9TtuRjN4bc0W4HmrR0.mft (raw, json)
Hash identifier: 7LZ1DY5UrzNj1BinyundILwGJ2J0f+22Utxlsj3AwK8=
Subject key identifier: EC:AC:35:7C:E5:7F:56:EF:C0:E6:00:28:96:CD:25:A8:02:3A:A3:C0
Authority key identifier: BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D
Certificate issuer: /CN=A913B489/serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D
Certificate serial: 0D70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
Manifest number: 0D65
Signing time: Thu 08 Oct 2026 18:07:08 +0000
Manifest this update: Thu 08 Oct 2026 18:07:08 +0000
Manifest next update: Thu 15 Oct 2026 18:07:08 +0000
Files and hashes: 1: vIYHvM59W9TtuRjN4bc0W4HmrR0.crl (hash: T9Kebqk+T95mEAvWjFqQPcITUmroir/yluLDvz6CKh4=)
2: 8325B5147FE911F09A568E85C4F9AE02.roa (hash: SEF/lx3q5Pq/2u0T3UwtlNSUgGkL6u5d5TOpErwQ7Qs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl
rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 18:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3440 (0xd70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B489, serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D
Validity
Not Before: Oct 8 18:07:08 2026 GMT
Not After : Oct 15 18:07:08 2026 GMT
Subject: CN=6ac7dbcc-f810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:bd:f3:a7:e0:e4:b8:4a:46:46:b6:01:13:
ab:41:ba:fa:07:36:5d:47:a6:69:4f:91:0b:a4:d9:
04:eb:0a:c2:5c:0a:a0:98:bc:b4:63:a6:a8:5f:e9:
c3:4c:81:19:ae:86:be:b7:a9:27:74:45:9a:6d:97:
3b:6b:cb:a6:a9:7f:10:a2:b1:a2:53:64:a5:2e:fc:
06:e0:cd:27:57:86:db:8a:02:c9:e3:be:43:2e:6b:
62:d4:f5:ef:96:01:20:e1:14:a1:ac:7d:2f:23:51:
50:0c:76:8c:ee:4e:e4:a7:fb:06:3b:99:16:d1:3b:
d5:01:f5:fa:6a:7b:93:41:7d:96:3e:9a:03:be:bf:
a7:12:f7:38:b2:69:d2:22:e4:9b:e8:28:a6:15:aa:
e2:ae:95:78:75:0a:33:ae:59:c4:22:76:ea:83:3b:
7a:10:07:6a:96:27:c1:7d:8a:dc:71:a9:07:9e:4f:
42:db:25:06:2d:33:9e:3d:a9:65:07:b8:5e:e4:27:
b0:c1:e0:db:9e:fe:54:99:db:74:3a:89:10:88:35:
da:ff:8c:41:ef:ab:a1:e3:d3:e9:0f:cd:ff:fd:2b:
06:df:ff:a8:c4:3e:5b:28:20:b3:37:86:2e:7e:7e:
c1:24:69:b4:aa:d5:e2:f0:f0:91:de:c8:f7:7b:97:
a2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AC:35:7C:E5:7F:56:EF:C0:E6:00:28:96:CD:25:A8:02:3A:A3:C0
X509v3 Authority Key Identifier:
keyid:BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:20:09:76:78:e3:f9:58:ae:59:47:57:f9:f9:67:b4:5a:8e:
d0:b3:6d:bf:0b:25:00:39:9e:e5:11:0b:f1:2c:67:78:99:94:
3c:4c:3a:ce:aa:59:dd:8d:9f:dd:fb:eb:f2:44:fa:02:6b:80:
cb:f0:94:3a:da:f6:9b:be:ec:9a:ed:37:da:5e:f2:96:08:87:
1f:92:50:87:90:52:e4:ad:14:c4:de:2f:20:5a:9a:d5:16:88:
d6:cc:32:41:dd:7f:59:93:d6:bd:66:cf:5f:71:31:0b:a7:3b:
7d:e6:e0:17:fb:e2:30:21:09:a3:d8:af:06:75:8d:7e:f2:41:
2f:56:b1:c3:8b:e0:af:f0:47:5c:df:fd:9f:c5:25:96:c1:2d:
9c:54:52:2b:c7:83:c4:1a:cf:b9:4d:2d:b5:4e:9d:8f:40:47:
71:6e:3e:a6:44:d7:28:12:89:1e:65:3e:06:f9:dc:79:45:12:
a7:b7:39:19:28:0f:cf:f0:80:5c:8b:34:40:e6:93:c4:d4:00:
05:8f:03:a4:8a:9f:2e:a8:d7:2d:ee:14:2e:f3:56:90:1c:3b:
a6:55:5a:93:3f:a8:da:6f:0c:18:7e:e1:b0:d9:3f:9e:ca:1a:
31:bd:26:7d:76:54:94:3c:b7:7d:24:40:71:1f:c8:b5:44:d7:
61:c7:62:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:45:09 2026 by rpki-client